envoyproxy / envoyproxy/envoy

Pass gRPC metadata to ext_authz

Offen
#7,272 2 Kommentare 11 Reaktionen 0 zugewiesene Personen Auf GitHub ansehen
enhancement help wanted
Vorherrschende Sprache
C++
Sterne
28.9k
Forks
5.6k
Ø Merge
1 T. 22 Std.
Gemergte PRs (30 T.)
430

Beschreibung

*Title*: *Pass gRPC metadata to ext_authz*

*Description*:
With current `ext_authz` filter implementation an external `grpc_service` receives only subset of request information, such as IPs and TLS details. It would be really helpful to have ability to access gRPC metadata headers as well.

Our current authorization schema is based on metadata fields added to grpc calls. Metadata is checked on server side, and we would like to move it out to Envoy filters.

It seems to be possible for `http_service` to configure which http headers will be passed to authz service, but nothing like that is configurable for `grpc_service` type.

Beitragsleitfaden

Beitragsleitfaden öffnen

Bewertung

Dieses Issue wurde noch nicht bewertet.

Neue Issues direkt in Ihr Postfach

Eine kurze Übersicht über anfängerfreundliche GitHub-Issues.